Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/YUANJHEN/0/3232332e32362e362e302f32332d3332203d3e20313331313439.roa
File:                     3232332e32362e362e302f32332d3332203d3e20313331313439.roa (raw, json)
Hash identifier:          Y12xlfekLvwP4G1mkzxyGAzt03PMoPVC/Sf7L4IaSl0=
Subject key identifier:   43:22:5E:4A:5B:9F:40:AD:FD:FD:3C:76:0C:ED:D2:02:A5:13:72:AC
Certificate issuer:       /CN=809590BEFB516AA616A45FA21C8495BBB968261F
Certificate serial:       4CF2BF8B49EA69769AD7040ABD95C7509F330D7F
Authority key identifier: 80:95:90:BE:FB:51:6A:A6:16:A4:5F:A2:1C:84:95:BB:B9:68:26:1F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/3232332e32362e362e302f32332d3332203d3e20313331313439.roa
Signing time:             Mon 11 May 2026 17:55:57 +0000
ROA not before:           Mon 11 May 2026 17:50:57 +0000
ROA not after:            Mon 10 May 2027 17:55:57 +0000
asID:                     131149
IP address blocks:        223.26.6.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.crl
                          rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f2:bf:8b:49:ea:69:76:9a:d7:04:0a:bd:95:c7:50:9f:33:0d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809590BEFB516AA616A45FA21C8495BBB968261F
        Validity
            Not Before: May 11 17:50:57 2026 GMT
            Not After : May 10 17:55:57 2027 GMT
        Subject: CN=43225E4A5B9F40ADFDFD3C760CEDD202A51372AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:63:9e:27:5e:5f:e7:44:da:9c:80:02:9e:03:
                    98:70:cc:be:10:47:68:3e:6b:65:0c:ff:3c:a9:03:
                    8d:b9:d3:31:90:3e:ee:95:84:28:5a:c9:1b:55:93:
                    6d:ec:4a:9d:fb:d0:6b:3d:89:3f:af:af:0c:67:47:
                    40:00:64:7b:01:5b:78:ea:1b:23:50:d3:a1:41:cd:
                    0a:7b:19:b7:94:c3:e5:ba:79:c1:45:63:fe:8f:28:
                    ce:19:5a:1a:5d:9c:9e:42:7f:49:e4:41:14:e0:4a:
                    a7:33:6b:36:81:70:21:4d:08:2f:85:df:83:a6:34:
                    6e:96:05:54:c5:12:d1:d1:9b:84:23:86:36:92:cb:
                    44:53:1e:da:92:12:8a:29:60:50:12:da:f8:50:b8:
                    2b:26:d4:69:3f:53:44:50:ee:59:b1:94:55:97:99:
                    3c:3f:92:88:ca:7c:74:e2:d3:83:e1:9e:94:f2:95:
                    c2:db:03:07:9c:7d:c5:16:95:07:8c:84:67:9e:ef:
                    51:62:45:05:d6:b0:be:40:c7:07:79:88:4e:66:40:
                    15:50:1a:ae:ac:6f:a7:cc:aa:b1:52:ce:68:65:0b:
                    a5:f7:81:6a:1e:2f:65:61:69:3d:ee:eb:64:99:27:
                    4f:b3:d0:9f:f5:3b:6e:6b:57:64:30:b0:30:db:b9:
                    de:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:22:5E:4A:5B:9F:40:AD:FD:FD:3C:76:0C:ED:D2:02:A5:13:72:AC
            X509v3 Authority Key Identifier:
                keyid:80:95:90:BE:FB:51:6A:A6:16:A4:5F:A2:1C:84:95:BB:B9:68:26:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/3232332e32362e362e302f32332d3332203d3e20313331313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.26.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:a0:54:6e:5a:1c:08:df:be:46:b3:d3:df:25:e9:30:b8:30:
         c6:a5:01:37:f5:40:40:0c:93:fc:0f:95:da:0d:da:02:74:43:
         21:9d:a7:f3:dd:96:34:63:1d:ee:6e:f4:2b:04:39:31:8a:e4:
         27:35:b3:0e:a3:fd:f1:fa:db:9a:9a:a1:0c:82:18:6b:e7:2b:
         33:77:31:72:21:b7:9b:d0:66:c9:08:20:70:78:9c:f1:7c:15:
         ab:65:4c:c8:95:be:b4:16:af:19:12:eb:a8:2a:c0:22:83:94:
         55:b5:13:31:7d:6f:9d:d3:a8:71:17:cd:e9:2a:85:16:91:b1:
         34:cd:8c:8f:12:3a:19:75:a0:39:4a:2c:3e:59:c7:96:ff:aa:
         61:7f:33:10:d6:70:32:62:23:cc:4b:d5:4a:d1:63:93:f1:7c:
         59:5a:be:b5:8b:2d:a8:5a:bb:3f:c7:59:df:00:cc:65:d8:a5:
         fc:f0:69:32:77:d4:23:db:53:9a:c6:fc:ee:ca:ac:b6:cf:eb:
         79:d2:44:c5:8a:d4:09:9d:cf:c2:4f:9b:ae:39:5f:6e:07:ef:
         93:ee:0b:04:cf:eb:f7:ff:db:83:e1:99:de:25:6a:f5:81:78:
         14:84:0d:e0:c3:43:a2:1e:fe:24:ea:35:44:1c:39:c0:d1:11:
         b7:40:95:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:15:16 2026 by rpki-client